IBM Jazz for Service Management XML External Entity Injection Vulnerability

Jazz is IBM Rational’s next-generation collaboration platform for software delivery technologies. carefully designed and developed specifically for global and cross-geographic teams, the Jazz platform will change the way people collaborate to build software - improving the collaboration, efficiency and transparency of software delivery. IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI suffer from an XML external entity injection vulnerability. An attacker could exploit the vulnerability to disclose sensitive information or consume memory resources.